No. ETSI opened the approval procedure for 17 vertical Cyber Resilience Act standards on 13 August 2026. Presumption of conformity under Article 27 starts only when a standard reference appears in the Official Journal of the European Union, and no EN 304 deliverable has reached that point.
What ETSI announced
ETSI placed 17 final draft standards from the EN 304 series under Public Enquiry. It sent them to 41 member organisations, which include the national standardisation bodies of the European Economic Area.
Four societal partners may also comment. ANEC represents consumers, ECOS represents environmental interests, ETUC represents trade unions and SBS represents small business. The procedure closes between mid-September and mid-November 2026, and the closing date depends on the vertical.
What the work programme records
Each of these deliverables now carries version 1.0.0 with a cover date of 13 August 2026. The status reads "Deliverable approval procedure initiated". Each work item also carries a Harmonised Standard flag set to Yes.
That flag is easy to misread. It marks the deliverable as a candidate for harmonisation under standardisation request M/606. It does not record a citation. The Official Journal field on every one of these work items is empty.
Why the distinction decides your conformity route
Article 27(1) attaches the presumption to harmonised standards "the references of which have been published in the Official Journal of the European Union". A draft confers nothing under that article. How advanced the draft is makes no difference, and neither does how closely a product follows it.
The consequence lands hardest on Annex III Class I products. Article 32(2) withdraws the Module A self-assessment option where harmonised standards do not exist. That condition is still met for every product category. Third-party assessment through Module B and Module C, or through Module H, remains the live route today. Article 32(3) places Class II products there in any case.
What is worth doing now
Read the draft for your category. ETSI publishes each approved draft at a permanent address on its own site, and the rapporteurs edit several of them in public GitLab repositories. The requirements are therefore readable today. Evidence built now is work a manufacturer will not have to find after citation.
Article 14 reporting obligations start on 11 September 2026. The rest of the Regulation applies on 11 December 2027.
Our mapping of the EN 304 series to every Annex III and Annex IV point records the stage of each deliverable and the committee that holds it. The CRA tracker carries the dated record of this event, and our FAQ answer on category coverage explains which body drafts which category.
Sources. The ETSI press release of 13 August 2026, the ETSI CYBER-EUSR open consultation area, Article 27 of Regulation (EU) 2024/2847 on EUR-Lex, and the CRA Standards Unlocked workshop programme run by CEN, CENELEC and ETSI.